Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: 8bzzDKnJecUNzdtwNHS6kU6umjSQjacCIJ0uwLJO9Zk=
Subject key identifier: 20:C3:03:AE:AA:78:82:EC:53:9C:1D:DF:55:A4:B5:BB:BA:D2:F9:81
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A0C5200E962D191967A62E5E01E738BCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0549
Signing time: Mon 21 Sep 2026 18:00:07 +0000
Manifest this update: Mon 21 Sep 2026 18:00:07 +0000
Manifest next update: Tue 22 Sep 2026 18:00:07 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (hash: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: woPu6Mfc8vSMHSSZrSExfJczPzGW7UKaoSAvRMGyeSo=)
4: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:0e:96:2d:19:19:67:a6:2e:5e:01:e7:38:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 21 18:00:07 2026 GMT
Not After : Sep 22 18:00:07 2026 GMT
Subject: CN=20c303aeaa7882ec539c1ddf55a4b5bbbad2f981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:2b:05:48:d8:b0:7e:59:ac:7b:0a:fa:79:
d0:a1:13:45:78:c5:80:c4:ef:af:72:0b:6f:46:b3:
92:ba:d6:2d:a5:3a:13:c8:c2:ce:8e:3e:e4:99:0f:
fb:f8:60:09:81:db:a9:f6:ef:15:bc:d1:65:84:14:
91:18:16:93:81:4e:08:ea:06:27:ba:79:01:b0:14:
39:10:8e:80:48:b2:46:b4:58:77:d7:bb:8c:49:ae:
f7:f0:6d:ff:e2:d8:e5:e7:6e:92:7a:d6:77:9e:08:
f6:82:9f:13:b0:c1:17:58:ff:d0:98:3d:86:ff:98:
50:4c:a0:a6:29:88:22:b6:49:54:41:8f:0f:41:50:
42:f4:14:50:41:e4:29:bb:30:76:09:19:b8:c7:8a:
21:a3:1b:32:30:3f:c9:ef:46:77:7b:33:7e:bb:ae:
31:71:e4:cc:41:58:80:62:86:5f:3a:21:37:e6:71:
25:28:82:bf:93:c0:c8:55:3a:4b:28:33:04:40:43:
96:d5:70:5f:23:ea:85:31:ae:68:6c:70:31:48:4a:
6a:6b:63:cb:e9:4a:2f:57:59:94:db:07:fd:49:be:
93:d0:88:34:97:b4:ce:f1:12:b4:9e:92:67:ba:45:
fc:91:5b:cd:7c:1c:0a:df:3b:f3:3e:eb:63:6c:f6:
9d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C3:03:AE:AA:78:82:EC:53:9C:1D:DF:55:A4:B5:BB:BA:D2:F9:81
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f6:a3:86:38:6f:63:b4:bf:d7:9b:de:df:92:2f:45:03:f5:
66:b7:54:7c:44:96:e4:5a:6c:83:d5:28:da:63:57:46:95:8e:
bb:34:c4:13:b8:61:67:9d:15:57:c6:4b:f5:42:50:6b:23:a0:
e2:e1:36:bf:e4:fc:ff:dc:10:d6:96:0d:67:90:2f:6f:a8:96:
96:e9:bd:c7:3c:3e:94:74:ff:f5:af:38:92:a2:1a:b1:22:7a:
7d:75:f9:fd:55:07:f8:5e:99:c3:51:81:f9:43:86:01:61:05:
b9:96:e9:8e:4b:e8:32:c7:d3:a6:b6:9c:50:75:d1:4b:52:e5:
b0:06:be:a0:33:fd:20:50:05:cf:45:5b:69:11:4c:fd:be:97:
0e:61:94:40:53:e5:bc:e9:10:18:5c:1b:b3:da:60:8c:21:45:
cf:3c:26:81:e8:43:43:ca:a8:1b:9a:c2:d3:92:61:1a:5a:c2:
3e:09:6f:3d:09:ce:92:96:da:46:a3:2b:67:81:c5:ae:0e:63:
4d:31:85:fb:af:6e:fc:c3:f3:67:f9:2b:e3:92:59:cf:c7:1a:
10:3a:c1:22:bb:35:37:fb:17:fc:65:ec:40:b5:13:ce:e0:b4:
be:f7:63:88:7f:12:35:ae:72:fd:18:4b:65:a9:c1:e8:84:00:
e1:13:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:34:44 2026 by rpki-client